Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2C2DCA8BE58AA68A998A5F06422AB4CEFEA31C93.cer
File: 2C2DCA8BE58AA68A998A5F06422AB4CEFEA31C93.cer (raw, json)
Hash identifier: 29wyLvXQoXzp4p3sYR9zA8x85O/Ted7QNN68gb5e9mY=
Subject key identifier: 2C:2D:CA:8B:E5:8A:A6:8A:99:8A:5F:06:42:2A:B4:CE:FE:A3:1C:93
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 320AE675EC794E28C2FF82CDBB6C8684E2807363
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/G6c4KW8rT1K1kxEt5GUMVQXmR1mZKPg5yKhQUgtijwtr/0/2C2DCA8BE58AA68A998A5F06422AB4CEFEA31C93.mft
caRepository: rsync://rpki-repo.registro.br/repo/G6c4KW8rT1K1kxEt5GUMVQXmR1mZKPg5yKhQUgtijwtr/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 09 Apr 2024 18:20:59 +0000
Certificate not after: Tue 08 Apr 2025 18:25:59 +0000
Subordinate resources: AS: 264221
AS: 269384
IP: 45.185.156.0/22
IP: 138.117.36.0/22
IP: 2804:2468::/32
IP: 2804:63cc::/32
Validation: Failed, certificate revoked on Fri 24 May 2024 10:59:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:0a:e6:75:ec:79:4e:28:c2:ff:82:cd:bb:6c:86:84:e2:80:73:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 9 18:20:59 2024 GMT
Not After : Apr 8 18:25:59 2025 GMT
Subject: CN=2C2DCA8BE58AA68A998A5F06422AB4CEFEA31C93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:eb:c2:f8:76:00:ab:ff:0b:6a:c5:20:5a:b9:
30:a1:c8:c3:d5:82:ce:5e:1c:84:1d:28:63:86:14:
97:a2:68:73:5a:7e:88:4a:2b:57:77:2d:07:45:2b:
04:63:09:86:6f:41:6d:14:65:3f:c3:4e:03:c5:ab:
14:43:37:d7:d4:ab:f8:fa:67:ea:5f:48:42:01:c0:
ca:69:68:66:2d:91:17:f8:b7:b4:a1:ff:6a:99:a4:
23:67:29:68:46:6e:96:b0:99:88:e4:6e:7b:1d:25:
e7:33:46:60:17:ea:87:77:c2:73:2b:45:48:59:f1:
48:e7:9a:e3:50:98:2c:f3:3d:8c:61:cc:68:d1:06:
f7:d8:a8:94:e1:9b:7b:96:08:49:74:8c:f4:10:8d:
aa:ab:78:3d:29:6c:cf:a6:b2:24:2f:81:64:bb:e0:
3d:9f:35:60:2e:73:f9:a1:de:7f:5e:9d:c1:4e:fb:
30:b7:b4:43:be:5d:b5:39:03:ea:eb:e0:f7:fc:0b:
dd:b6:4c:92:64:81:d2:f8:18:4f:07:f3:51:c3:7a:
a0:36:5a:38:96:91:59:60:5e:fb:30:4f:69:ea:65:
d2:8c:09:6a:4e:d9:5d:d5:69:0e:ea:eb:ef:9d:54:
19:a0:49:13:28:49:e9:11:b9:a5:3a:97:00:d8:e4:
70:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
2C:2D:CA:8B:E5:8A:A6:8A:99:8A:5F:06:42:2A:B4:CE:FE:A3:1C:93
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/G6c4KW8rT1K1kxEt5GUMVQXmR1mZKPg5yKhQUgtijwtr/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G6c4KW8rT1K1kxEt5GUMVQXmR1mZKPg5yKhQUgtijwtr/0/2C2DCA8BE58AA68A998A5F06422AB4CEFEA31C93.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.185.156.0/22
138.117.36.0/22
IPv6:
2804:2468::/32
2804:63cc::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264221
269384
Signature Algorithm: sha256WithRSAEncryption
db:85:d2:bf:83:fb:2f:ed:48:ae:7a:a1:84:fd:c6:80:ea:b7:
4b:69:4f:f3:db:15:f2:85:31:fb:e9:2a:92:dd:28:0f:ec:8b:
63:ba:8b:ba:f2:cc:e2:dd:f2:7f:08:ff:b9:b1:00:bb:db:0a:
c6:09:fd:72:ad:eb:4b:71:be:5a:35:e5:64:18:5b:7b:9b:d6:
60:da:73:42:48:9b:ce:30:37:a6:e2:57:45:87:bd:8c:07:03:
a8:b7:04:97:05:17:fa:13:9c:8d:a2:8b:e9:09:26:45:10:03:
34:8a:2b:40:1b:b8:d1:80:c2:8c:c7:a3:a3:75:92:63:3b:36:
bf:10:c3:7f:b6:06:a5:e5:f1:75:98:50:75:bc:aa:ee:aa:6b:
3a:bb:c8:01:1b:11:07:61:47:d9:13:d3:33:04:51:5f:d1:03:
1c:5c:c0:c8:d0:2a:45:65:85:57:f7:94:58:06:f4:78:52:dd:
cd:40:7c:a5:db:3b:61:4d:33:10:b2:b6:87:35:a2:0b:e6:72:
09:ca:99:59:8d:50:9b:0a:c9:7d:6c:15:51:f5:d8:06:b7:b8:
0e:cc:30:9d:f4:f2:a1:75:4f:f1:62:fd:53:8b:3b:28:37:b6:
53:b4:af:b1:e8:93:ae:18:23:9d:eb:28:39:3b:3e:a1:69:ab:
17:35:6b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:22 2024 by rpki-client on console-ams.rpki-client.org